This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.cer
File:                     26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.cer (raw, json)
Hash identifier:          OHiZkvYmIKUKYaWxWgdcWWBsQWdg3XWiPG/ClNrMJY4=
Subject key identifier:   26:DD:82:D3:A5:AB:AB:06:FA:1F:09:23:F6:F7:0A:2E:D7:A0:89:22
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       686A6D025EEFA28F9E2C0DDCAA58ABDF58634DFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 11:47:04 +0000
Certificate not after:    Wed 27 Jan 2027 11:52:04 +0000
Subordinate resources:    IP: 138.0.12.0/22
                          IP: 2801:1b:6000::/48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6a:6d:02:5e:ef:a2:8f:9e:2c:0d:dc:aa:58:ab:df:58:63:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 11:47:04 2026 GMT
            Not After : Jan 27 11:52:04 2027 GMT
        Subject: CN=26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:02:9e:28:3a:d7:b6:49:34:c4:db:8c:5e:
                    86:53:ee:2d:15:06:db:6e:f1:07:7c:ce:38:55:59:
                    64:ac:2f:80:f2:39:8c:b6:d3:16:8c:0b:47:fd:f2:
                    30:cd:c8:c3:5f:7f:10:15:ba:78:ff:3f:ae:8b:c7:
                    7b:fc:ee:44:13:28:46:ab:19:bf:31:98:d4:ee:48:
                    a9:38:be:ae:97:f9:64:ea:33:96:38:01:02:14:30:
                    e5:d0:9c:fa:37:f1:76:36:48:26:8d:8f:06:2a:96:
                    1b:50:3d:4d:68:0d:fb:7f:d5:1d:1e:54:b6:7d:76:
                    e1:a0:8e:73:4b:82:17:d7:d8:f4:d8:6d:e5:31:09:
                    dd:23:18:01:06:a4:7e:89:de:97:46:9f:16:f2:f8:
                    18:57:ef:cf:9e:a9:bd:97:8f:2a:f9:6b:0a:15:49:
                    62:65:a8:18:69:c8:b1:4e:43:07:1f:62:0f:94:9e:
                    67:cd:db:05:65:16:f9:d7:a4:dd:b0:16:b4:f7:3b:
                    98:e6:44:b7:0a:9d:07:b8:88:c7:0e:57:4e:6c:06:
                    53:61:13:d1:64:7c:f7:f6:68:ce:0c:21:19:97:07:
                    71:9a:bc:9e:b4:90:93:1e:30:b5:8f:d4:cb:f2:33:
                    68:28:e2:96:1b:bb:e2:8a:c1:ef:75:02:69:a9:92:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:DD:82:D3:A5:AB:AB:06:FA:1F:09:23:F6:F7:0A:2E:D7:A0:89:22
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.12.0/22
                IPv6:
                  2801:1b:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:13:1b:6c:01:a8:43:33:09:e3:62:fc:42:e4:49:a3:ee:d6:
         17:f9:9d:df:41:c4:95:82:5b:2c:a8:c9:13:b3:44:99:17:10:
         84:51:9f:0c:85:d6:b0:7f:af:e2:bd:5b:20:01:41:90:ed:7e:
         73:c7:76:76:a0:78:49:fc:1c:51:2c:2f:a4:d6:7c:f7:7e:33:
         8c:70:a3:be:87:c0:fb:f3:6e:78:6e:26:d2:58:1b:b9:4a:87:
         55:9f:2e:03:3f:fa:7b:92:99:d5:20:12:a7:05:be:45:83:aa:
         7d:31:be:c0:c0:72:70:af:73:c9:26:60:a9:48:eb:b1:69:c2:
         da:69:61:97:13:c5:91:43:46:14:c7:95:88:90:c1:f9:cb:c7:
         a1:ce:c6:ba:05:8e:8c:dd:6b:21:49:99:ac:6e:5a:b6:5c:78:
         76:94:52:67:7a:83:53:e5:0b:e7:b6:9d:a1:51:49:64:e2:4d:
         3d:23:51:14:7e:93:bd:af:45:e3:b1:62:dc:46:86:7e:0e:0b:
         8d:98:5f:9c:58:1e:61:0f:35:3c:39:8a:9b:bd:ba:a6:a8:02:
         7b:fe:16:00:d7:c4:01:57:ef:71:8c:f2:4e:a6:ab:cf:32:24:
         0c:48:7d:62:1e:4e:d7:3c:8f:c5:9a:d8:2a:b9:22:2b:5f:dc:
         9b:fe:b0:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jan 29 02:11:53 2026 by rpki-client